Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          5S9Lrk4jurU0fBDFhs9NIatb8G6wmMFfQQHvvdBWG6c=
Subject key identifier:   B6:C8:6B:2A:45:8C:54:25:43:89:ED:DF:8C:4C:64:48:4A:06:C4:15
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       019A1AD07C2D5513FFC2A38FB05AEF562741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          16F6
Signing time:             Sat 25 Oct 2025 10:01:02 +0000
Manifest this update:     Sat 25 Oct 2025 10:01:02 +0000
Manifest next update:     Sun 26 Oct 2025 10:01:02 +0000
Files and hashes:         1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=)
                          2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=)
                          3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=)
                          4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: EhqZK5DwZO80t6OzejVApCfOCj0UevyFDyxuQk/nj8I=)
                          5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=)
                          6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:d0:7c:2d:55:13:ff:c2:a3:8f:b0:5a:ef:56:27:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Oct 25 10:01:02 2025 GMT
            Not After : Oct 26 10:01:02 2025 GMT
        Subject: CN=b6c86b2a458c54254389eddf8c4c64484a06c415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:b6:b5:29:a3:49:15:15:4e:e4:16:d2:19:
                    ba:3d:2d:71:00:83:06:0a:27:dd:4f:28:cc:2f:8b:
                    22:42:ec:8c:5e:ed:1e:69:8a:7d:de:de:b9:d6:d7:
                    4e:8e:81:39:9f:53:c5:4a:92:f8:5e:fa:af:10:bc:
                    9a:03:12:da:85:14:56:f7:89:ef:7a:c8:16:7e:45:
                    82:ec:5c:ac:0f:82:cd:1b:d8:94:97:a1:90:4d:d1:
                    41:ce:9c:30:ee:2f:84:ff:ff:a4:4a:d2:0c:be:7b:
                    c0:b0:39:65:2b:65:5a:92:d2:8a:cb:29:6f:4d:bb:
                    5e:30:56:75:e7:d7:56:10:83:ca:7b:db:ba:6b:f8:
                    50:85:63:34:74:2b:c9:60:d3:14:fe:7b:ee:cc:23:
                    c4:b3:79:89:be:0a:20:d6:f6:cf:40:ff:19:ae:3d:
                    77:33:92:e0:de:58:02:65:3d:45:2a:82:3d:9b:31:
                    7f:5e:e4:52:36:8b:09:6c:bf:d6:e4:12:df:fa:7d:
                    34:ca:23:19:b0:94:88:85:09:df:2a:73:56:f7:54:
                    99:b4:a3:f4:1a:60:31:62:35:8b:a1:77:00:be:fd:
                    db:4a:53:49:db:a6:90:d1:81:a9:14:91:9f:fc:d1:
                    1d:ad:2e:05:d6:27:44:a7:55:3e:05:4c:92:0b:8d:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:6B:2A:45:8C:54:25:43:89:ED:DF:8C:4C:64:48:4A:06:C4:15
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:0f:97:84:ca:d0:20:15:4a:ce:60:96:8f:81:ac:64:45:
         e1:4a:62:73:a3:21:04:15:e6:71:1b:60:59:11:0e:d7:15:76:
         00:0f:a1:d6:f6:f2:8d:7d:3e:42:b1:97:4c:77:98:6e:7a:9d:
         c6:ba:09:bd:ee:22:34:47:9e:22:e0:a3:74:ea:57:d8:90:b1:
         11:f8:52:a5:77:bf:ac:5f:a6:94:5d:25:d3:5b:a5:c9:19:b0:
         ed:2f:7e:ce:be:d1:7a:6e:fd:93:75:0e:76:9b:63:76:ac:98:
         d9:0a:36:0e:f8:39:6f:65:fa:79:50:13:3a:8d:d9:dc:57:ca:
         e3:18:07:c6:0d:fd:35:59:6f:4a:89:1f:dc:aa:a5:f8:4d:02:
         e7:0f:0b:15:ba:de:76:bc:c4:1f:67:5a:80:3b:02:ac:26:94:
         24:d2:d6:e3:52:14:3f:90:d9:a9:02:60:e6:ad:e3:72:0d:11:
         18:c0:22:50:f0:de:97:98:9f:cf:40:e4:e3:e7:1f:1e:58:8e:
         99:17:c2:f9:6c:f6:0a:4b:63:2b:e6:b7:c3:1f:25:76:c4:69:
         5a:ea:cf:48:33:e7:39:60:59:dc:00:e6:88:0b:0a:4f:80:96:
         67:ee:67:47:25:ab:fc:cc:75:73:e9:ae:bb:40:ef:d1:3b:60:
         78:bd:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:50:10 2025 by rpki-client